M Hickford afebbf29a9 Require authentication for OAuth token refresh (#21421) ... According to the OAuth spec https://datatracker.ietf.org/doc/html/rfc6749#section-6 when "Refreshing an Access Token" > The authorization server MUST ... require client authentication for confidential clients Fixes #21418 Co-authored-by: Gusted <williamzijl7@hotmail.com> Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>		2022-10-23 13:28:46 +08:00
..
2fa.go	Refactor auth package (#17962)	2022-01-02 21:12:35 +08:00
auth.go	Suppress `ExternalLoginUserNotExist` error (#21504)	2022-10-19 20:07:21 +01:00
linkaccount.go	Add support mCaptcha as captcha provider (#20458)	2022-08-10 15:20:10 +02:00
main_test.go	Use a struct as test options (#19393)	2022-04-14 21:58:21 +08:00
oauth.go	Require authentication for OAuth token refresh (#21421)	2022-10-23 13:28:46 +08:00
oauth_test.go	Refactor AssertExistsAndLoadBean to use generics (#20797)	2022-08-16 10:22:25 +08:00
openid.go	Add support mCaptcha as captcha provider (#20458)	2022-08-10 15:20:10 +02:00
password.go	Make better use of i18n (#20096)	2022-06-26 22:19:22 +08:00
webauthn.go	WebAuthn CredentialID field needs to be increased in size (#20530)	2022-07-30 15:25:26 +02:00